crash if auth token is invalid